Concentrated Differential Privacy: Simplifications, Extensions, and Lower Bounds
Not on the map. Why?
Abstract (arXiv)
"Concentrated differential privacy" was recently introduced by Dwork and Rothblum as a relaxation of differential privacy, which permits sharper analyses of many privacy-preserving computations. We present an alternative formulation of the concept of concentrated differential privacy in terms of the Renyi divergence between the distributions obtained by running an algorithm on neighboring inputs. With this reformulation in hand, we prove sharper quantitative results, establish lower bounds, and raise a few new questions. We also unify this approach with approximate differential privacy by giving an appropriate definition of "approximate concentrated differential privacy."
Key facts. Cited by 346 papers in the map (data through 14 Oct 2026). First posted on arXiv 6 May 2016.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 52; 2022: 60; 2023: 69; 2024: 62; 2025: 50; 2026: 53.
346 papers.
Sort:
By area:
- 2021Membership Inference Attacks on Machine Learning: A Surveycited by 321
- 2021Adversary Instantiation: Lower Bounds for Differentially Private Machine Learningcited by 199
- 2021Numerical Composition of Differential Privacycited by 180
- 2023How to DP-fy ML: A Practical Guide to Machine Learning with Differential Privacycited by 153
- 2022Reconstructing Training Data with Informed Adversariescited by 148
- 2021The Distributed Discrete Gaussian Mechanism for Federated Learning with Secure Aggregationcited by 128
- 2023Privacy Auditing with One (1) Training Runcited by 123
- 2021Hyperparameter Tuning with Renyi Differential Privacycited by 104
- 2021Do Not Let Privacy Overbill Utility: Gradient Embedding Perturbation for Private Learningcited by 86
- 2021Optimal Accounting of Differential Privacy via Characteristic Functioncited by 86
- 2021ML-Doctor: Holistic Risk Assessment of Inference Attacks Against Machine Learning Modelscited by 85
- 2021The Skellam Mechanism for Differentially Private Federated Learningcited by 68
38 more
- 2022Differentially Private Language Models for Secure Data Sharingcited by 68
- 2023Federated Learning of Gboard Language Models with Differential Privacycited by 66
- 2021Iterative Methods for Private Synthetic Data: Unifying Framework and New Methodscited by 59
- 2022Improved Differential Privacy for SGD via Optimal Private Linear Operators on Adaptive Streamscited by 59
- 2023DP-OPT: Make Large Language Model Your Privacy-Preserving Prompt Engineercited by 57
- 2021Differentially Private Query Release Through Adaptive Projectioncited by 52
- 2022Connect the Dots: Tighter Discrete Approximations of Privacy Loss Distributionscited by 52
- 2022TAN Without a Burn: Scaling Laws of DP-SGDcited by 52
- 2023Privacy-Preserving In-Context Learning for Large Language Modelscited by 50
- 2023(Amplified) Banded Matrix Factorization: A unified approach to private trainingcited by 49
- 2022Multi-Epoch Matrix Factorization Mechanisms for Private Machine Learningcited by 48
- 2021Improved Rates for Differentially Private Stochastic Convex Optimization with Heavy-Tailed Datacited by 47
- 2021Covariance-Aware Private Mean Estimation Without Private Covariance Estimationcited by 46
- 2022Composition of Differential Privacy & Privacy Amplification by Subsamplingcited by 45
- 2021Survey: Leakage and Privacy at Inference Timecited by 44
- 2021Tighter expected generalization error bounds via Wasserstein distancecited by 43
- 2021Leveraging Public Data for Practical Private Query Releasecited by 39
- 2021Private and polynomial time algorithms for learning Gaussians and beyondcited by 39
- 2022The Fundamental Price of Secure Aggregation in Differentially Private Federated Learningcited by 39
- 2022On Privacy and Personalization in Cross-Silo Federated Learningcited by 36
- 2022Normalized/Clipped SGD with Perturbation for Differentially Private Non-Convex Optimizationcited by 36
- 2022Private Synthetic Data for Multitask Learning and Marginal Queriescited by 35
- 2021FriendlyCore: Practical Differentially Private Aggregationcited by 34
- 2021A Private and Computationally-Efficient Estimator for Unbounded Gaussianscited by 34
- 2022SoteriaFL: A Unified Framework for Private Federated Learning with Communication Compressioncited by 34
- 2023Exploring One-shot Semi-supervised Federated Learning with A Pre-trained Diffusion Modelcited by 33
- 2021Private Federated Learning Without a Trusted Server: Optimal Algorithms for Convex Lossescited by 30
- 2021Federated f-Differential Privacycited by 29
- 2022Stronger Privacy Amplification by Shuffling for R'enyi and Approximate Differential Privacycited by 29
- 2021Lossless Compression of Efficient Private Local Randomizerscited by 27
- 2022A Critical Review on the Use (and Misuse) of Differential Privacy in Machine Learningcited by 27
- 2022Private Non-Convex Federated Learning Without a Trusted Servercited by 26
- 2022Privacy Induces Robustness: Information-Computation Gaps and Sparse Mean Estimationcited by 25
- 2023Differentially Private Attention Computationcited by 25
- 2021IdentityDP: Differential Private Identification Protection for Face Imagescited by 24
- 2024Private prediction for large-scale synthetic text generationcited by 24
- 2021Differentially Private Quantilescited by 23
- 2022Learning to Generate Image Embeddings with User-level Differential Privacycited by 23
50 most cited of 346 All 346 (JSON)
- 2026On Inherent Privacy of Posterior Sampling: A Unified R'enyi-Divergence Framework14 Oct 2026
- 2026Tight End-to-End Accounting for Differentially Private Synthetic Data12 Oct 2026
- 2026Can R'enyi Accountants Beat Lossless Accountants for DP-SGD?12 Oct 2026
- 2026Exact Unlearning via Quantized Sufficient Statistics5 Oct 2026
- 2026High-Dimensional Asymptotics and Dataset Selection for Private Transfer Learning1 Oct 2026
- 2026Certification-Based Differentially Private Learning30 Sep 2026
- 2026A Sharp Transition in Data Reconstruction under Differential Privacy29 Sep 2026
- 2026FinancialAuditBench: Benchmark Construction under Differential Privacy Using Real-World Priors26 Sep 2026
- 2026How Reusable Are Benchmarks with Richer Feedback?26 Sep 2026
- 2026SPADE-DFL: Communication-Efficient Decentralized Federated Learning via Derivative-Free Linearized ADMM24 Sep 2026
- 2026Only Pay What You Must Spend: On-Demand Privacy Budget Payment for Differentially Private RAG23 Sep 2026
- 2026On-Device Commercial Intent Retrieval Under Size, Latency, and Privacy Constraints: A 3 MiB Retrieval System with Typed Egress Boundaries16 Sep 2026
38 more
- 2026CANAL: Channel-Aware Noise Allocation for Differentially Private Feature Distillation in Medical Image Segmentation7 Sep 2026
- 2026PAC-Private Autoregressive Generation: Calibrating Noise to Ensemble Disagreement4 Sep 2026
- 2026Performative Privacy: When Differential Privacy Maximizes Utility28 Aug 2026
- 2026SecureDrive-FL: Joint Differential Privacy and Gradient-Aware Selective Homomorphic Encryption for Federated Driver Monitoring27 Aug 2026
- 2026Private Anytime Selective-Risk Certification for Federated Retrieval-Augmented Generation: Guarantees and Empirical Limits8 Aug 2026
- 2026StraightDP: Geometry-Aware Differential Privacy for Rectified-Flow Transformers31 Jul 2026
- 2026Near-optimal node-private community estimation in polynomial-time10 Jul 2026
- 2026A Sieve-Accelerated Quadrature Method for Exact Privacy Accounting in the 2020 U.S. Decennial Census29 Jun 2026
- 2026Privacy-preserving federated tensor decomposition of single-cell immune data: recovering multicellular programs across institutions22 Jun 2026
- 2026AdaPrivate-TS: Private Thompson Sampling for Contextual Bandits with Privacy Amplification19 Jun 2026
- 2026Enhancing Differentially Private Mechanisms via Empirical Bayes19 Jun 2026
- 2026Cross-Silo De-Anonymization Under Local Differential Privacy: Threat Model, Phase Transition, and Coordination Necessity15 Jun 2026
- 2026Revisiting ML Training under Fully Homomorphic Encryption: Convergence Guarantees, Differential Privacy, and Efficient Algorithms27 May 2026
- 2026From Privacy to Generalization: Linear Max-Information Bounds for Differentially Private Learning Algorithms25 May 2026
- 2026Efficient DP-SGD for LLMs with Randomized Clipping24 May 2026
- 2026Private Adaptive Covariance Estimation via Gaussian Graphical Models22 May 2026
- 2026Lumberjack: Better Differentially Private Random Forests through Heavy Hitter Detection in Trees21 May 2026
- 2026A Van Trees Lower Bound for Fully Interactive Differentially Private Federated Learning19 May 2026
- 2026Privacy Preserving Reinforcement Learning with One-Sided Feedback18 May 2026
- 2026Deep Learning under Fractional-Order Differential Privacy11 May 2026
- 2026Trade-off Functions for DP-SGD with Subsampling based on Random Allocation: Tight Upper and Lower Bounds7 May 2026
- 2026Class-Aware Adaptive Differential Privacy in Deep Learning for Sensor-Based Fall Detection3 May 2026
- 2026Barriers to Counterfactual Credit Attribution for Autoregressive Models2 May 2026
- 2026Tight Auditing of Differential Privacy in MST and AIM20 Apr 2026
- 2026DPrivBench: Benchmarking LLMs' Reasoning for Differential Privacy17 Apr 2026
- 2026Refined Differentially Private Linear Regression via Extension of a Free Lunch Result11 Apr 2026
- 2026Optimal Rates for Pure varepsilon-Differentially Private Stochastic Convex Optimization with Heavy Tails7 Apr 2026
- 2026Accurate and Scalable Matrix Mechanisms via Divide and Conquer1 Apr 2026
- 2026Privacy-Preserving Reinforcement Learning from Human Feedback via Decoupled Reward Modeling23 Mar 2026
- 2026Minimax and Adaptive Covariance Matrix Estimation under Differential Privacy20 Mar 2026
- 2026Less Noise, Same Certificate: Retain Sensitivity for Unlearning3 Mar 2026
- 2026MAPLE: Metadata Augmented Private Language Evolution26 Feb 2026
- 2026DPSQL+: A Differentially Private SQL Library with a Minimum Frequency Rule26 Feb 2026
- 2026CREDIT: Certified Ownership Verification of Deep Neural Networks Against Model Extraction Attacks23 Feb 2026
- 2026Differentially Private Retrieval-Augmented Generation16 Feb 2026
- 2026Sequential Auditing for f-Differential Privacy6 Feb 2026
- 2026Shuffle and Joint Differential Privacy for Generalized Linear Contextual Bandits31 Jan 2026
- 2026Near-Optimal Private Tests for Simple and MLR Hypotheses29 Jan 2026
50 newest of 346 All 346 (JSON)
- 2021Membership Inference Attacks on Machine Learning: A Surveycited by 321
- 2021ML-Doctor: Holistic Risk Assessment of Inference Attacks Against Machine Learning Modelscited by 85
- 2024The Utility and Complexity of in- and out-of-Distribution Machine Unlearningcited by 20
- 2023Tight Bounds for Machine Unlearning via Differential Privacycited by 18
- 2023DPSUR: Accelerating Differentially Private Stochastic Gradient Descent Using Selective Update and Releasecited by 10
- 2025MCMC for Bayesian estimation of Differential Privacy from Membership Inference Attackscited by 1
- 2026Less Noise, Same Certificate: Retain Sensitivity for Unlearningcited by 1
- 2024Bayes-Nash Generative Privacy Against Membership Inference Attackscited by 0
- 2025Mo' Memory, Mo' Problems: Stream-Native Machine Unlearningcited by 0
- 2026Exact Unlearning via Quantized Sufficient Statisticscited by 0
- 2026Exact Unlearning via Quantized Sufficient Statistics5 Oct 2026
- 2026Less Noise, Same Certificate: Retain Sensitivity for Unlearning3 Mar 2026
- 2025Mo' Memory, Mo' Problems: Stream-Native Machine Unlearning13 Aug 2025
- 2025MCMC for Bayesian estimation of Differential Privacy from Membership Inference Attacks23 Apr 2025
- 2024The Utility and Complexity of in- and out-of-Distribution Machine Unlearning12 Dec 2024
- 2024Bayes-Nash Generative Privacy Against Membership Inference Attacks9 Oct 2024
- 2023DPSUR: Accelerating Differentially Private Stochastic Gradient Descent Using Selective Update and Release23 Nov 2023
- 2023Tight Bounds for Machine Unlearning via Differential Privacy2 Sep 2023
- 2021Membership Inference Attacks on Machine Learning: A Survey14 Mar 2021
- 2021ML-Doctor: Holistic Risk Assessment of Inference Attacks Against Machine Learning Models4 Feb 2021
- 2025InvisibleInk: High-Utility and Low-Cost Text Generation with Differential Privacycited by 10
- 2025Differentially Private Synthetic Text Generation for Retrieval-Augmented Generation (RAG)cited by 6
- 2026Differentially Private Retrieval-Augmented Generationcited by 2
- 2026Private Anytime Selective-Risk Certification for Federated Retrieval-Augmented Generation: Guarantees and Empirical Limitscited by 0
- 2026Only Pay What You Must Spend: On-Demand Privacy Budget Payment for Differentially Private RAGcited by 0
- 2026Only Pay What You Must Spend: On-Demand Privacy Budget Payment for Differentially Private RAG23 Sep 2026
- 2026Private Anytime Selective-Risk Certification for Federated Retrieval-Augmented Generation: Guarantees and Empirical Limits8 Aug 2026
- 2026Differentially Private Retrieval-Augmented Generation16 Feb 2026
- 2025Differentially Private Synthetic Text Generation for Retrieval-Augmented Generation (RAG)8 Oct 2025
- 2025InvisibleInk: High-Utility and Low-Cost Text Generation with Differential Privacy30 Jun 2025
- 2021Adversary Instantiation: Lower Bounds for Differentially Private Machine Learningcited by 199
- 2021Numerical Composition of Differential Privacycited by 180
- 2023How to DP-fy ML: A Practical Guide to Machine Learning with Differential Privacycited by 153
- 2022Reconstructing Training Data with Informed Adversariescited by 148
- 2021The Distributed Discrete Gaussian Mechanism for Federated Learning with Secure Aggregationcited by 128
- 2023Privacy Auditing with One (1) Training Runcited by 123
- 2021Hyperparameter Tuning with Renyi Differential Privacycited by 104
- 2021Do Not Let Privacy Overbill Utility: Gradient Embedding Perturbation for Private Learningcited by 86
- 2021Optimal Accounting of Differential Privacy via Characteristic Functioncited by 86
- 2021The Skellam Mechanism for Differentially Private Federated Learningcited by 68
- 2022Differentially Private Language Models for Secure Data Sharingcited by 68
- 2023Federated Learning of Gboard Language Models with Differential Privacycited by 66
12 most cited of 321 All 321 (JSON)
- 2026On Inherent Privacy of Posterior Sampling: A Unified R'enyi-Divergence Framework14 Oct 2026
- 2026Tight End-to-End Accounting for Differentially Private Synthetic Data12 Oct 2026
- 2026Can R'enyi Accountants Beat Lossless Accountants for DP-SGD?12 Oct 2026
- 2026High-Dimensional Asymptotics and Dataset Selection for Private Transfer Learning1 Oct 2026
- 2026Certification-Based Differentially Private Learning30 Sep 2026
- 2026A Sharp Transition in Data Reconstruction under Differential Privacy29 Sep 2026
- 2026FinancialAuditBench: Benchmark Construction under Differential Privacy Using Real-World Priors26 Sep 2026
- 2026How Reusable Are Benchmarks with Richer Feedback?26 Sep 2026
- 2026SPADE-DFL: Communication-Efficient Decentralized Federated Learning via Derivative-Free Linearized ADMM24 Sep 2026
- 2026On-Device Commercial Intent Retrieval Under Size, Latency, and Privacy Constraints: A 3 MiB Retrieval System with Typed Egress Boundaries16 Sep 2026
- 2026PAC-Private Autoregressive Generation: Calibrating Noise to Ensemble Disagreement4 Sep 2026
- 2026Performative Privacy: When Differential Privacy Maximizes Utility28 Aug 2026
12 newest of 321 All 321 (JSON)